> The OWASP Top 10 is rapidly losing coherence.

Do you have any recommendations of better resources for web application developers needing to learn about security?